CVE-2012-6643: SQL Injection
Multiple SQL injection vulnerabilities in the updatecounter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to (1) videos.php or (2) channels.php. NOTE: some of these details are obtained from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-6643?
CVE-2012-6643 is considered to be a critical severity vulnerability due to its potential for remote SQL injection attacks.
What are the main affected components in CVE-2012-6643?
The main affected components in CVE-2012-6643 are the update_counter function in includes/functions.php, specifically through the time parameter in videos.php and channels.php.
How do I fix CVE-2012-6643?
To fix CVE-2012-6643, it is recommended to apply input validation and parameterized queries in the affected functions.
Who is vulnerable to CVE-2012-6643?
Any installation of ClipBucket version 2.6 is vulnerable to CVE-2012-6643.
What can attackers do with CVE-2012-6643?
Attackers exploiting CVE-2012-6643 can execute arbitrary SQL commands on the ClipBucket database.